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Mondrian memory protection (MMP) is a fine-grained protection scheme that allows 
multiple protection domains to flexibly share memory and export protected services. In 
contrast to earlier page-based systems, MMP allows arbitrary permissions control at the 
granularity of individual words. We use a compressed permissions table to reduce space 
overheads and employ two levels of permissions caching to reduce run-time overheads. 
The protection tables in our implementation add less than 9% overhead to ... 
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Andrew is a distributed computing environment that is a synthesis of the personal 
computing and timesharing paradigms. When mature, it is expected to encompass over 
5,000 workstations spanning the Carnegie Mellon University campus. This paper examines 
the security issues that arise in such an environment and describes the mechanisms that 
have been developed to address them. These mechanisms include the logical and physical 
separation of servers and clients, support for secure communication ... 
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In this work, we propose and investigate the idea of enhancing a System -on -Chip (SoC) 
communication architecture (the fabric that integrates system components and carries the 
communication traffic between them) to facilitate higher security. We observe that a wide 
range of common security attacks are manifested as abnormalities in the system-level 
communication traffic. Therefore, the communication architecture, with its global system- 
level visibility, can be used to detect them. The communicati ... 

Keywords: AMBA Bus, access control, architecture, attacks, bus, communication, digital 
rights management (DRM), intrusion detection, security, security-aware design, small 
embedded systems, system-on-chip (SoC) 
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We describe the architecture for a single-chip aegis processor which can be used to build 
computing systems secure against both physical and software attacks. Our architecture 
assumes that all components external to the processor, such as memory, are untrusted. 
We show two different implementations. In the first case, the core functionality of the 
operating system is trusted and implemented in a security kernel. We also describe a 
variant implementation assuming an untrusted operating s ... 
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The resulting national focus on Network Integrity issues, spawned the development of an 
industry commitment to affect and realize a minimum security baseline for interconnected 
SS7 networks. In addition the affected carriers in those outage have accelerated their 
pursuit of secure solutions to today's intelligent networking. [2]This paper will focus on the 
development of the baseline and the current effort to take the baseline into national, e.g., 
National Ins ... 
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The IEEE 802.15.4 specification outlines a new class of wireless radios and protocols 
targeted at low power devices, personal area networks, and sensor nodes. The 
specification includes a number of security provisions and options. In this paper, we 
highlight places where application designers and radio designers should exercise care 
when implementing and using 802.15.4 devices. Specifically, some of the 802.15.4 
optional features actually reduce security, so we urge implementors to ignore those ... 
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To be able to fulfil the need of user in wireless ATM, the system has to acquire features. 
One of the system features for the wireless ATM is functionality especially the security 
aspect. There is so far tittle, if not none, security consideration in the developing of 
wireless ATM standard. Therefore a wide range of features in security functions is in 
consideration. This paper tried to define the features of security in wireless ATM networks 
considering it features from existing fixed ATM netwo ... 
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Disk arrays were proposed in the 1980s as a way to use parallelism between multiple disks 
to improve aggregate I/O performance. Today they appear in the product lines of most 
major computer manufacturers. This article gives a comprehensive overview of disk arrays 
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and provides a framework in which to organize current and future work. First, the article 
introduces disk technology and reviews the driving forces that have popularized disk 
arrays: performance and reliability. It discusses the tw ... 
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